DATA  IN  A  BLENDER 

Mix  data  sets  for  consumer  insights  11 

TECH  IN  THE  DANGER  ZONE 

IT  offers  rapid  response  to  world  crises  16 

GOOGLE  GLASS:  NOT  DEAD  YET 

Smart  glasses  still  viable  in  business  17 

NEW  ROLES,  NEW  TITLES 

Latest  IT  jobs  focus  on  CX,  analytics  28 


Many  IT  groups  are  reorganizing,  but  a  few  companies  are  taking  that  to 
the  extreme:  Breaking  the  traditional  IT  department  into  pieces.  20 

BY  KIM  S.  NASH 


Engaging  the  Board 

Are  directors'  eyes  glazing 
over?  Here's  howto  make 
your  briefing  come  alive,  » 


This  cloud  stands  up 


Microsoft  Azure  scales  to  enable  AccuWeather 
to  respond  to  9.5  billion  requests  for  crucial 
weather  data  per  day.  This  cloud  rises  to  the 
challenge  when  the  weather  is  at  its  worst. 


This  is  the  Microsoft  Cloud 


Microsoft  Cloud 


Your  enterprise  is  only  as 
secure  as  your  ability  to  see 

all  the  data. 


That's  where  we  come  in.  LogRhythm's  next-generation  security  intelligence  platform  identifies  high- 
impact  threats  and  neutralizes  them  before  they  can  result  in  a  material  breach.  It  uniquely  unifies  SIEM 
and  log  management  with  network  and  endpoint  forensics  and  advanced  security  analytics  to  provide 
comprehensive  threat  life  cycle  management  and  the  ideal  foundation  for  today's  cyber  security  operations. 

:::  Log  Rhythm 

Assess  your  Security  Intelligence  now  at  logrhythm.com/simm  The  Security  Intelligence  Company 
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Deconstructing 
IT  20 

cover  story  Many  IT  departments 
are  reorganizing,  but  a  few  companies 
are  taking  that  to  the  extreme: 
Breaking  traditional  IT  into  pieces. 

BY  KIM  S.  NASH 


Zappos  reinvented  itself  as  a  holacracy  because  "we  want 


everyone  thinking  about  how  we  can  improve  things," 
says  CTO  Brent  Cromley. 
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Bleeding-Edge  IT 

Welcome  to  the  bleeding  edge  of  IT  reorgs.  Our  first  stop  will  be  Zappos’ 
technology  department,  renamed  Unicorn  after  the  CEO’s  favorite  mytho¬ 
logical  creature.  (I’m  not  making  that  up.  Honestly,  how  could  anyone?) 

Next,  we’ll  cruise  by  GameStop,  which  carved  its  IT  function  into  four 
groups  focused  on  delivery,  architecture,  strategy  and  customer  experience. 
The  final  stop  on  our  tour  will  be  Accu Weather,  which  rebranded  its  CIO  as 
a  chief  digital  officer,  split  IT  into  two  categories  (daily  work  and  strategic 
work)  and  moved  some  sales  functions  into  IT. 

These  three  stand  out  as  the  most  radical  examples  detailed  in  our  cover 
story,  “Deconstructing  IT”  (page  20).  The  IT  department  isn’t  about  to  disap¬ 
pear,  but  more  companies  are  erasing  the  lines  and  boxes  of  their  traditional 
org  charts  and  restructuring  IT. 

Some  of  these  changes  are  defensive  responses  to  the  gale-force  winds 
of  change  from  the  digital  economy;  some  are  offensive  moves  designed  to 
spark  greater  innovative  thinking. 

Zappos,  for  example,  spent  last  year  breaking  apart  its  corporate  hier¬ 
archy  and  reassembling  it  into  a  “holacracy,  ”  a  kind  of  corporate  commune 
where  people  work  in  groups  or  circles  that  constantly  rearrange  them¬ 
selves  as  new  projects  emerge. 

“It’s  a  radical  approach  and  we’re  passionate  about  trying  it,”  says  Brent 
Cromley,  CTO  at  Zappos.  “We  want  everyone  thinking  about  how  we  can 
improve  things,  not  just  a  select  few  at  a  time  or  a  group  set  aside  to  do 
innovation.” 

GameStop’s  longtime  CIO,  Jeff  Donaldson,  looked  hard  at  the  multi¬ 
ple  roles  a  modern  CIO  must  play  and  decided  it  was  “really  ridiculous 
to  expect  that  one  professional  can  operate  effectively  across  all  of  those 
personas.”  Each  of  the  four  new  IT  functions  has  its  own  senior  IT  leader. 
Donaldson  took  on  the  GameStop  Technology  Institute,  which  focuses 
on  product  innovation.  These  days  his  job  is  all  about  collaborating  with 
futurists,  researchers  and  venture  capitalists. 

“This  lights  up  neurons,”  he  says.  “There’s  nothing  better  than  that.” 

“Done  well,  a  dramatic  overhaul  can  make  IT  responsive  to  the  unknown. 
Done  poorly,  you  fertilize  staff  resentment  about  too  much  change  or  dead¬ 
end  jobs  on  legacy  systems,”  writes  Kim  S.  Nash.  “There  are  no  best  prac¬ 
tices  for  the  bleeding  edge.  Just  a  few  intrepid  CIOs.” 


Maryfran  Johnson,  Editor  in  Chief,  CIO  Magazine  &  Events 

mfjohnson@cio.com 


Own  Your  Culture 

Workplace  culture  is  an  important  part  of 
attracting,  hiring  and  retaining  top  talent. 
But  if  your  organization  isn't  taking  steps  to 

codify  and  enforce  the  culture  you  want 
you  may  end  up  with  exactly  the  one  you 
don't.  Every  workplace  has  a  culture-the 
values,  mission,  attitude,  atmosphere 
and  environment  in  which  business  is  done. 
Experts  say  that  if  culture  is  allowed  to 
evolve  without  executive  guidelines 
and  without  input  from  employees,  you 
could  wind  up  with  a  workplace  milieu  that's 
unattractive  to  job  applicants, 
www, cio.com/article/Z875140/ 

Reality,  Augmented 

Microsoft's  HoloLens  smart  glasses,  which 
augment  reality  with  overlaid  holograms, 
could  have  corporate  applications, 

including  uses  that  improve  the  customer 
experience.  For  example,  an  airplane 
manufacturer  might  use  HoloLens  to  help 
customers  visualize  options  for  cabin  inte¬ 
riors,  with  different  choices  instantly  installed 
in  a  virtual  environment,  Likewise,  home¬ 
builders  could  show  customers  available 
house  upgrades  and  custom  features. 
www.cio.com/article/Z884133/ 

Millennials'  Traits 

Millennial  already  make  up  a  large  part 
of  the  workforce,  and  in  10  years  they  are 
expected  to  represent  the  majority  of  work¬ 
ers.  In  order  to  tap  this  generation's 
full  potential,  businesses  need  to  bet¬ 
ter  understand  its  traits  and  work  styles. 
Experts  say  millennials  are  entrepreneur¬ 
ial  (because  they've  watched  the  rise  of 
tech  startups);  they  have  the  confidence  to 
change  jobs  quickly;  they  like  frequent, 
in-person  feedback  from  their  supervi¬ 
sor;  and  they  favor  flexible  schedules. 
www.cio.com/article/Z883906/ 


Have  a  comment  about  a  story  in  this 
issue?  Go  to  www.cio.com/magazine  or 
write  to  letters@cio.com. 
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Stop  Burning  Through 
Your  IT  Budget. 

Nutanix  reduces  datacenter  costs  up  to  60%  so  you  can  invest  more 
in  your  business.  Deploy  powerful,  pay-as-you-grow  infrastructure  and 
decrease  the  day-to-day  costs  of  managing  your  datacenter. 

Learn  why  you  need  Nutanix  solutions  today. 

www.nutanix.com/tco 
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Security  Upgrade 


Q 


This  will  be  the  year  when  cybersecurity  concerns  crash  the  boardroom 
party  and  take  a  seat  at  the  head  of  the  table.  The  aftershocks  of  significant 
data  breaches  at  Anthem,  Sony,  Home  Depot,  eBay,  JPMorgan  Chase,  Target 
and  many  more  have  caused  headline-grabbing  business  upheavals  that 
worry  customers,  affect  profit  margins  and  derail  corporate  careers. 

This  sharpening  of  cybersecurity  focus  has  forced  corporate  boards 
to  have  conversations  they  once  considered  too  technical  and  back-office- 
oriented.  Now  it’s  all  about  business  risk  assessment,  not  firewalls  or  data 
loss  prevention  tools.  How  prepared  are  you  to  have  these  discussions  with 
the  CEO  and  the  board  of  directors?  What  are  the  most  important  questions 
you  should  be  ready  to  answer?  Here  are  a  few  to  consider: 

■  What  actions  are  we  taking  to  protect  the  company  from  the  high  risks 
associated  with  cybersecurity  incidents? 

■  What  is  our  specific  plan  to  address  cybersecurity  across  our  business? 
Are  our  employees  properly  updated  and  trained? 

■  If  (or  more  likely  when)  a  breach  occurs,  what  is  our  response  plan? 
(Internal  and  external.) 

■  Do  we  have  the  right  security  talent  on  board?  Are  we  structured  prop¬ 
erly  to  avoid  (or  reduce  the  impact  of)  a  breach? 

■  Have  we  quantified  our  risk  exposure?  (Both  hard  costs  and  soft?) 

In  a  2014  report  titled  “Risk  and  Responsibility  in  a  Hyperconnected 
World”  from  the  World  Economic  Forum  and  McKinsey  &  Co.,  the  total 
economic  cost  of  ineffective  security  was  projected  to  top  $3  trillion  glob¬ 
ally  by  2020.  That’s  a  staggering  but  unfortunately  plausible  number.  So 
if  there’s  no  question  that  cyber  security  breaches  can  devastate  the  bottom 
line,  why  haven’t  more  companies  acted  to  deal  with  it  more  effectively? 

Should  chief  security  officers  report  to  CEOs  instead  of  CIOs?  Our 
own  research-— the  annual  Global  State  of  Information  Security  Survey 
conducted  by  CSO,  CIO  and  PricewaterhouseCoopers— suggests  that  they 
should.  Our  survey  of  more  than  9,000  respondents  worldwide  found  that 
companies  with  CSOs  reporting  directly  to  CEOs  or  boards  had  notably 
less  downtime  and  smaller  financial  losses  after  cybersecurity  incidents. 

Isn’t  it  time  to  upgrade  cybersecurity  to  a  board-level  risk  management 
discussion,  not  just  occasionally  but  consistently? 

What  are  you  waiting  for? 
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Michael  Friedenberg,  CEO 
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We  take  the  mystery  out  of  getting  value 
from  your  IT  investment. 

The  Huntzinger  Management  Group  (HMG)  takes  a  hands-on  approach  to  assisting 
our  clients  in  leveraging  their  IT  investment.  Whether  it’s  through  our  Advisory  and 
Managed  Services  or  our  Staffing  Solutions,  we  offer  pragmatic,  actionable  solutions 
to  help  you  obtain  maximum  value  from  your  IT  spend. 

In  order  for  organizations  to  compete  in  today’s  health  care  market,  they  must  provide 
highly  robust  and  integrated  systems  that  support  extremely  efficient  processes. 

Our  consultants  provide  the  leadership,  expertise  and  execution  you  require  to 
provide  such  an  environment. 

Find  out  how  Huntzinger  Management  Group  can  benefit  your  organization  by  visiting 
huntzingergroup.com/print,  or  call  570.824.4721  and  let  Huntzinger  give  you  a  hand. 

HUNTZINGER" jj^ 
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TIPS  &  TAKEAWAYS  FROM  CIO  MAGAZINE  EVENTS 


When  Pushed  to  Change, 
Lead-Don'tjust  Manage 

To  get  his  audience  in  the  right  mindset  to  think  about 
change,  Randy  Pennington  often  tells  a  story  about  the 
early  days  of  his  marriage.  “My  wife  said,  ‘Randy,  I  will 
never  ask  you  to  change.’  How  cool  is  that?”  says  the  busi¬ 
ness  performance  coach  and  author  of  Making  Change  Work. 

Then  comes  the  wifely  punch  line:  “But  I  will  ask  you 
to  continually  adapt.” 

As  the  closing  keynote  at  our  recent  CIO  Perspectives 
Dallas  event,  Pennington  reframed  the  classic  topic  of 
change  management  in  very  human  terms,  emphasizing 
the  need  for  candor  and  honesty  about  what’s  happening. 
When  employees  express  resistance  to  change,  “they’re 
telling  you  they’re  concerned  about  it  or  afraid  of  it.  At 
least  try  to  understand  and  listen  to  them,”  he  advised. 

People  will  change  for  two  reasons,  he  added:  “Crisis 
pushes  us  to  change.  Or  opportunity  pulls  us  to  change.” 
Challenging  the  status  quo  means  there  will  be  a  “messy 
transition  part”  to  deal  with,  he  noted.  “We  all  bring  bag¬ 
gage  to  a  change.  Leaders  help  to  unpack  those  bags.” 

-Maryfran  Johnson 
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Ken  Waterman 

CTO  and  CISO,  Textron 


The  New 
Security 
Landscape 

In  light  of  the  Sony  hack, 
what  advice  would  you 
give  CIOs? 

In  previous  days,  we  focused 
on  the  perimeter  and  keep¬ 
ing  the  bad  guys  out,  Now, 
we  assume  breach  and 
make  sure  our  defenses  are 
capable  of  protecting  from  an 
insider.  Very  often,  you  think 
you're  doing  the  things  you 


need  to  do,  but  if  you  don't 
get  the  basics  right,  they 
can  get  in  and  do  what  they 
want  to  you,  To  know  where 
you  should  dedicate  security 
resources,  you  need  to  know 
where  the  crown  jewels  are 
for  your  company  and  then 
focus  the  resources  on  pro¬ 
tecting  those, 

How  does  Textron  find  its 
security  talent? 

Talent  in  security  is  a  real 
industry  challenge  right  now, 
Our  approach  has  been  to 
get  them  right  out  of  school. 
[We]  look  at  the  schools 
that  have  the  best  programs 
and  then  train  [their  gradu¬ 
ates]  and  see  how  long  we 
can  have  them  work  for  us 
before  someone  steals  them 
away. 


What's  the  most  pressing 
type  of  security  threat 
right  now? 

Top  of  mind  for  me  is  con¬ 
tinuing  to  look  at  how  to 
defend  against  advanced 
persistent  threats  (APT)  and 
nation-sponsored  attacks. 
What  assets  are  they  looking 
for  and  what  type  of  meth¬ 
ods  are  they  using? 

What's  your  approach 
when  talking  to  the 
board  about  security? 

I  like  to  understand  what 
each  board  member's  back¬ 
ground  is-what  industry 
they're  from  and  what  other 
boards  they're  on-so  I  can 
tailor  my  message  to  them 
based  on . . ,  what  might  be 
top  of  mind  to  them. 

-Lauren  Brousell 
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On  business  transformation: 

"Every  institution  has  a  choice. 
Choose  not  to  play,  fine,  But  if  you 
don't  like  change,  you're  going  to 
hate  extinction." 

- Charlie  Feld,  Founder, 
The  Feld  Group  Institute 

On  escalating  security  risks: 

"It's  a  perfect  storm  of  extremely 
demanding  consumers,  changing 
technology  and  hackers  getting 
more  tools." 


- Zulfi  Ahmed,  SVP  &  Global  CISO, 
MetLife 


On  speaking  in  business 
language: 

"Not  all  business  partners  have  a 
firm  understanding  of  IT.  Know  who 
your  audience  is  and  you  can  make 
communication  a  lot:  better.  CIOs 
say  a  lot  of  buzzwords." 

■  ■ Jacob  Lillard,  Application 
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SYS-F618R2-F  Series 


SYS-F618R2-R+  Series 


SYS-F628R3-F  Series 


SYS-F628R3-R+  Series 


Eight,  Four  or  Two  hot-pluggable  Servers  (Nodes)  in  a  4U  form  factor. 

Each  Node  supports  up  to: 

•  1TB  DDR4-21 33MHz  memory  in  1 6  DIMM  slots 

•  1  PCI-E  3.0  xl  6,  and  1  MicroLP  PCI-E  3.0  x8  slots  (Rear  I/O  models) 

•  8  SAS  3.0  (1 2Gbps)  ports  with  LSI®  3008  controller,  RAID  0,1 ,1 0 

•  1 0  SATA  3.0  (6Gbps)  ports  with  Intel®  C61 2  controller,  RAID  0,1 ,5,1 0 

.  NVMe  support  "^iMss 

•  Dual  lOGBase-T  or  Dual  Gigabit  Ethernet  LAN  options 

•  Redundant  Titanium  (96%+)/Platinum  (95%+)  Level  Digital  power  supplies 

•  Integrated  IPMI  2.0  plus  KVM  with  dedicated  LAN 

•  Up  to  36  Cores  per  system  and  145WTDP  dual  Intel®  Xeon®  Processor  E5-2600  v3  product  family 


Digital!  We  P  wer  the  Cloud 

www.supermicro.com/FatTwin 

©  Super  Micro  Computer,  Inc.  Specifications  subject  to  change  without, iiotice. 

:e),  the  Intel  logo,  Xeon,  and  Xeon  Inside  are  trademarks  or  registered  trademarks  of  Intel  Corporation  in  the  US.  and/pr  other  countries. 
All  other  brands  and  names  are  the  property'of  their  respective owners 


SUPERMICR 


Evolutionary  4U  Twin 'Architecture 

Supports  up  to:  36  Cores  and  145WTDP  Intel®  Xeon®  processor  E5-2600  v3  Product  Family 
1TB  DDR4-2133MHz  in  16  DIMMs  •  SAS  3.0  (12Gbps)  •’  8  HDDs/1  U  •  lOGBase-T 
NVMe  •  Redundant  Titanium/Platinum  Level  Digital  Power  Supplies 


8-Node  w/  Front  I/O 
Highest  Density  &  Efficiency 


8-Node  w/  Rear  I/O 
Highest  Power  &  Efficiency 


4-Node  w/  Front  I/O 


4-Node  w/  Rear  I/O 
8  hot-swap  3.5"  HDDs  per  1 U 


Flexible  Designs  Optimized  for 
a  variety  of  Applications,  including: 

•  Data  Center  /  Cloud  /  Hadoop  applications 

•  HPC/ GPU  applications 

•  Science  /  Research  environments 

•  Finance  /  Oil  &  Gas  markets 


Navigate  your  way  to 
the  3rd  Platform  with 
IDC  DecisionScapes 


Getting  from  the  2nd  to  the  3rd  Piatform 
is  major  transformation  for  a  business. 
Everything  from  the  impact  technology 
has  on  the  business,  to  the  business  model 
of  the  IT  organization,  to  the  nature  of  IT 
talent  is  changing. 


IDC  DecisionScape  methodologies  align 
with  the  various  stages  of  decision  making 
They  enable  IT  executives  to  make  better 
informed  strategic  decisions. 


IDC  FutureScape 


IDCTechScape 


IDC  MaturityScape 


IDC  PlanScape 


IDC  DecisionScapes 


IDC  MaturityScape 
Benchmark 


IDC  EdgeScape 


IDC  IdeaScape 


IDC  MarketScape 


.  Analyze  the  Future 

5  Speen  Street 
Framingham,  MA  01701 
+1.508.872.8200 

www.idc.com/itexecutive 


ILLUSTRATION  BY  RAFAEL  RICOY  OLARIAGA 


Data  in  a  Blender 

Mixing  disparate  data  sets  helps  a  marketing  firm  gather  new 
consumer  insights  by  mary  k.  pratt 

As  vice  president  of  analytics  and  insight  at  Crossmark,  Alex  Siskos  wanted  to  move  his  team’s 
role  from  transactional  to  strategic,  from  running  reports  to  making  decisions.  But  a  hodgepodge  of 
tools  and  manual  processes  for  analyzing  hundreds  of  terabytes  of  data  annually  stood  in  the  way. 

Crossmark  provides  consumer  goods  companies  with  sales  and  marketing  services  that  it 
develops  by  analyzing  shopper  data  from  subscription  services  such  as  Nielsen,  transaction  data 
from  point-of-sale  systems  and  market  trend  data  from  industry  associations.  The  company  also 
pulls  data  from  shipping  forms,  customer  databases  and  emailed  attachments. 

Siskos  says  that  the  time-consuming,  resource-intensive  process  didn’t  always  yield  what  he 
calls  “hidden  relevant  truths.” 

“Depending  on  how  good  the  person  was  at  the  tools,  that’s  how  good  your  insight  was,”  he 
explains.  “It  was  inconsistent.”  -  ►  ► 
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. 60%  Dating  apps  that  are  vulnerable  to  cyberattacks,  putting 

personal  and  corporate  information  at  risk,  ibm  Mobile  security  study  •  •  •  •  . . 
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►  ►  Blended  Data  Continued  from  page  11 
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CEOs  See  Digital  Upsides 


The  process  also  created  technical  prob¬ 
lems,  he  says.  The  sheer  volume  of  data  being 
brought  together  frequently  generated  error 
messages  within  applications  or  caused  com¬ 
puters  to  freeze. 

Andy  Mulholland,  an  analyst  at  Constel¬ 
lation  Research,  says  this  is  an  issue  for  many 
companies  as  they  try  to  use  multiple  data 
sets  to  harvest  insights.  “Blending  sets  of 
data  together  might  well  result  in  something 
meaningless  unless  done  very  carefully  by  an 
expert,”  he  says. 

Crossmark  recently  deployed  a  suite  of 
products  from  Alteryx  to  combine  and  ana¬ 
lyze  data  and  tools  from  Tableau  for  visu¬ 
alization.  The  new  systems  let 
Crossmark  “unlock  the  creativity 
of  key  insightful  folks  to  improve 
the  quality  of  the  insights  we’re 
delivering,”  says  Rob  Saker,  the 
marketing  firm’s  chief  data  officer. 

For  example,  to  ensure  that 
a  client’s  product  is  in  the  right 
stores  at  the  right  time,  Crossmark 
would  blend  disparate  data— 
maybe  POS  figures,  demographic 

statistics  and  geographical  information— into  a  single  form  that 
analysts  can  use  to  see  insights  about  consumer  trends.  That,  in 
turn,  can  influence  pricing  and  placement  decisions. 

Crossmark  was  able  to  do  that  in  the  past  but  could  analyze 
only  about  80  percent  of  the  data  it  can  now  process,  Siskos  says. 
His  team  also  built  tools  within  Alteryx  to  let  clients  upload  their 
own  data  sets  into  Crossmark’s  systems  efficiently  and  securely. 

The  company  recently  examined  sales  information  for 
a  product  sold  by  a  5,000-store  chain  to  determine  how  to 
increase  revenues  in  certain  regions.  The  Crossmark  team 
zeroed  in  on  27  particular  stores  based  on  indications  that  a 
specific  marketing  strategy  would  work  in  their  locales.  “Before, 
I’d  be  in  cross  tabs  of  an  Excel  sheet  trying  to  find  things,”  Siskos 
says.  “Now  I’m  interacting  with  a  map  and  it’s  done  in  seconds.” 

Projects  that  once  took  days  have  been  cut  to  a  few  hours— 
sometimes  minutes.  As  Siskos  explains,  “It’s  gone  from 
someone  trying  to  wrap  their  hands  around  how  to  do  this  to 
wrapping  their  minds  around  what  to  do  strategically.” 

Mary  K,  Pratt  is  a  freelance  writer  based  in  Massachusetts, 


Top  execs  are  aware  of  security  risks,  but  see  stratei 
opportunities  in  mobile,  data  analytics  and  the  Inter  of  Things 


How  strategically  important  are  these  technologies 
for  your  organization? 


Mobile  tech  for  engaging  customers 
Data  mining  and  analysis 
Cybersecurity 

Internet  of  Things  65% 


81% 

80% 


78% 


SOURCE:  PricewaterhouseCoopers  global  survey  of  1,322  CEOs,  January  2015;  multiple  responses  allowed. 


"Now  I'm 
interacting 
with  a  map 
and  it's  done 
in  seconds" 

-Alex  Siskos,  vice  president 
of  analytics  and  insight, 
Crossmark 
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Boom  Times 
for  Digital 
Marketing 

Spending  on  marketing  tech  is  about  to  take 
off:  Annual  expenditures  will  hit  $120  billion 
10  years  from  now,  up  from  $12  billion  today, 
according  to  venture  capitalist  Ashu  Garg, 
general  partner  at  Foundation  Capital. 

"This  is  unprecedented  growth,"  Garg  says. 
"There's  a  fundamental  shift,  an  irreversible 
trend,  of  consumers  living  in  a  digital  world" 
that's  causing  a  high  demand  for  marketing 
technology  to  reach  those  consumers. 

Late  last  year,  a  Gartner  survey  of  BOO 
companies  found  that  spending  on  digital 
marketing  averaged  a  quarter  of  the  market¬ 
ing  budget  in  2014,  and  half  of  the  companies 
plan  to  increase  spending  this  year.  "Gartner's 
2014  CEO  Survey  found  that  digital  marketing 
was  the  No.  1  CEO  priority  for  technology- 
enabled  business  capability  for  investment 
during  the  next  five  years,"  says  Gartner  ana¬ 
lyst  Yvonne  Genovese. 

"Marketing  is  a  technical  discipline  now," 
Doug  Milliken,  vice  president  of  global  brand 
development  at  Clorox,  said  in  Foundation 
Capital's  report.  "We  have  to  reframe  things  we 
have  been  doing  for  100  years." 

-Tom  Kaneshige 


TTTT 


•••••••••••••  34%  Online  shoppers  who  say  they  either  quickly  skim  or  ignore 

the  Segal  language  (e.g.,  terms  of  service)  that  they  agree  to.  FindLaw.com . ••••• 
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A  manufacturing  cloud  that  constantly  updates, 
so  you  can  constantly  adapt.  It’s  what’s  next. 
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Manufacturing  is  changing  at  record  speed.  To  keep  up,  over  400  forward-thinking  companies 
run  their  manufacturing  operations  with  the  Plex  Manufacturing  Cloud.  Unlike  on-premise  systems, 
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Plex  continuously  improves  to  address  current  and  future  challenges.  It’s  always  flexible,  always 
current,  and  the  best  way  for  a  manufacturer  to  be  ready  for  what’s  to  come.  PLEX.COM 
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►Business  strategist 


Engaging  the  Board 

Are  directors'  eyes  glazing  over?  Use  mind  maps,  analogies  and  the  rule  of  three 
to  make  your  presentations  come  alive,  by  Madeline  weiss  and  june  drewry 


Mohamoud  Jibrell  took  over  as  CIO  at 

the  Howard  Hughes  Medical  Institute 
(HHMI)  in  2010  with  a  clear  mandate: 
Gain  control  of  IT  spending,  improve  IT 
service  quality,  and  ensure  that  HHMI 
gets  value  from  its  IT  investments.  A  seasoned  CIO  Jibrell 
took  the  necessary  steps  to  execute  on  that  mandate.  When 
it  was  time  for  him  to  report  to  the  board  of  directors  in 
2011,  he  used  a  large  deck  of  detailed  slides  to  explain  the 
initial  problems  and  the  positive  effects  of  his  fixes.  But 
Jibrell  left  the  meeting  with  a  sense  that 
he  had  missed  an  opportunity  to  engage 
the  board  in  a  high-level  conversation. 

At  a  meeting  of  the  Society  for  Infor¬ 
mation  Management’s  Advanced  Prac¬ 
tices  Council  (APC),  Jibrell  asked  his 
peers  for  suggestions  on  how  to  avoid  a 
repeat  performance.  He  got  several  good 
ideas. 

John  Hood,  an  IT  program  manager 
at  ConocoPhillips,  described  his  use 
of  mind  maps  for  executive  presenta¬ 
tions.  A  mind  map— which  often  looks  like  a  tree  with  the 
main  idea  as  the  trunk  and  branches  and  twigs  of  related 
thoughts— is  a  diagram  used  to  visually  organize  informa¬ 
tion.  Hood  uses  commercial  software  to  create  mind  maps, 
which  he  displays  on  the  screen  in  the  conference  room. 
He  encourages  board  members  to  determine  the  level  of 
detail  they  want  to  see  (i.e.,  which  branches  and  twigs)  and 
particularly  enjoys  having  decision-makers  ask  for  levels 
of  detail  he  had  not  planned  to  discuss.  “It’s  like  the  Dilbert 
cartoon  where  the  pointy-haired  boss  says,  ‘No,  no— click 
there,  click  there’  to  Dilbert  at  the  computer  screen.”  Hood 
adds  content  to  mind  maps  during  meetings  so  participants 
can  see  their  ideas  captured.  The  tool  also  helps  him  keep 
a  record  of  decisions. 

Two  APC  members  said  they  used  analogies  to  explain 
technical  topics.  One  CIO  recalled  comparing  the  term 
“asynchronous  communication”  (which  could  easily 
cause  a  non-IT  executive  to  zone  out)  to  the  experience  of 


waiting  in  line  at  a  Disney  amusement  park.  Tom  Reidy, 
j  chief  architect  of  insurance  solutions  at  UnitedHealth 
Group,  said  he  explains  “loose  coupling”  of  IT  compo¬ 
nents,  which  enhances  agility,  by  comparing  it  to  stereo 
systems  that  have  modular  components.  ■ 

Brad  James,  CTO  of  Tompkins  Financial,  recounted  his 
use  of  the  “rule  of  three,”  which  derives  from  the  idea  that 
people  tend  to  remember  lists  of  three  things.  James  gives 
bimonthly  updates  to  the  senior  leadership  team  on  criti- 
|  cal  issues  and  also  briefs  the  board  of  directors  on  the  IT 
strategic  plan.  “By  presenting  concepts 
in  threes,  which  is  typically  what  the 
human  brain  can  comprehend  at  one 
time,  relaying  the  information  in  simple 
terms,  and  pausing  for  questions  after 
the  key  concepts,  the  directors  are  more 
engaged  and  open  to  hearing  the  pre¬ 
sentation,”  he  says. 

Another  APC  member  said  he  keeps 
slides  simple— as  simple  as  Google’s 
home  page.  Each  of  the  few  slides  he  uses 
features  a  picture  or  an  idea.  He  fleshes 
out  the  real  content  in  his  spoken  explanations.  Success 
depends  on  “writing  your  own  presentations  and  practicing 
each  presentation  a  lot,”  he  says,  adding  “this  takes  time.” 

Last  November,  Jibrell  returned  to  update  his  HHMI 
board  about  IT’s  accomplishments.  Having  learned  from 
his  previous  experience,  and  from  his  APC  peers,  he 
brought  only  a  few  concise,  high-level  slides.  Each  slide 
followed  the  rule  of  three:  past,  present  and  future;  red, 
yellow  and  green.  He  left  the  meeting  with  a  sense  of  con¬ 
fidence  that  he  had  engaged  the  board  at  the  right  level.  An 
unexpected  byproduct  of  Jibrell’s  preparation  is  that  he 
now  has  a  powerful,  visual  IT  road  map  that  can  help  him 
better  communicate  with  HHMI  executives,  IT  customers 
and  IT  employees. 


Madeline  Weiss  is  director  of  the  Society  for  Information  Man¬ 
agement's  Advanced  Practices  Council.  June  Drewry  is  a  former 
GO  of  Chubb  and  an  adviser  to  the  APC. 


Present  concepts 
in  threes,  which  is 
typically  what  the 
human  brain  can 
comprehend  at  one 
time.  Use  simple 
terms  and  pause 
for  questions. 
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IT  in  the  Danger  Zone 


The  World  Bank  overhauls  tech  operations  for  rapid  response  to 
the  ravages  of  war,  disease  and  poverty  by  Stephanie  overby 

The  World  Bank  had  been  through  six  IT  leaders  in  as  many  years  when  Stephanie  von  Friedeburg 
took  the  role  in  2012.  A  20-year  development  and  investment  veteran  of  the  World  Bank  Group 
and  an  expert  in  Russian  studies,  von  Friedeburg  had  previously  taken  on  the  unexpected  role 
of  CIO  at  the  International  Finance  Corporation,  a  member  of  the  World  Bank  Group  focused  on 
private-sector  development.  After  she  spent  several  years  turning  around  that  IT  organization,  the 
World  Bank’s  then  president,  Robert  Zoellick,  tapped  her  to  tackle  the  organization’s  larger  IT  group. 

Six  weeks  later,  Jim  Yong  Kim  became  president  of  the  World  Bank.  He  saw  technology  as 
critical  to  his  vision  of  reducing  the  global  poverty  rate  from  14.5  percent  to  3  percent  by  2030.  The 
World  Bank’s  five  member  organizations  offer  loans  and  other  financing  to  developing  countries. 
Better  IT  systems  in  186  country  offices  in  some  of  the  most  tumultuous  areas  on  the  planet  ■  ►  ► 
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►  ►World  Bank  Continued  from  page  16 


would  mean  the  bank’s  16,000  employees  could 
deliver  better  development  programs  to  address  the 
world’s  most  complex  problems.  Kim  “gave  us  carte 
blanche  to  go  for  it,”  says  von  Friedeburg. 

But  building  systems  that  work  at  the  bank’s 
Washington  headquarters  and  at  its  in-country 
offices  is  a  huge  challenge.  In  countries  like  Afghan¬ 
istan  and  Mongolia,  applications  from  ERP  to  email 
were  slower,  less  accessible  and  more  expensive 
than  at  home,  says  Colin  Shepherd,  head  of  opera¬ 
tions  for  IFC’s  finance  and  markets  practice  group 
in  Africa,  Latin  America  and  the  Caribbean.  “Basic 
infrastructure  constraints  meant  that  our  ability 
to  provide  timely  information  to  our  clients  and 
stakeholders  was  significantly  reduced,”  he  says. 

As  von  Friedeburg  puts  it,  “IT  had  lost  its  focus.” 
She  says  she  immediately  made  investments  to  give 
IT  some  “street  cred,”  beginning  with  doubling  net¬ 
work  capacity.  She  also  set  up  a  risk  and  compliance 
organization,  an  enterprise  architecture  group  and 
an  IT  communications  team  that  includes  a  former 
L’Oreal  product  marketer  to  sell  IT’s  efforts  internally. 

One  project  was  a  GIS  system  to  assess  war  dam¬ 
age  to  Syria’s  hospitals,  infrastructure  and  agricul¬ 
tural  operations.  Analyzing  geographic  information 
with  other  UN  data  improved  the  process  of  relocat¬ 
ing  refugees,  making  it  easier  to  find  areas  where 
they’d  get  the  most  support  to  restart  their  lives. 

A  new  telephony  system  with  Cisco  videoconfer¬ 
encing  gear  in  all  offices  cuts  down  on  travel  require¬ 
ments  and  improves  productivity.  The  presidents  of 
Liberia  and  Sierra  Leone  use  the  World  Bank’s  sys¬ 
tem  to  connect  with  the  UN  to  discuss  the  Ebola  crisis. 

New  cloud  applications  help  employees  when 
they  pull  out  of  dangerous  areas,  such  as  Kabul.  In 
the  past,  they  would  have  had  to  pack  up  and  carry 
servers  with  them  to  maintain  email  access  when 
they  closed  an  office  and  fled.  With  cloud-based 
email  and  Box.org  file-sharing  services,  staffers  can 
maintain  full  access  to  their  data  when  they  relocate. 

“For  the  first  time  in  years,  our  field  office  staff 
feels  equal  to  their  D.C.  counterparts  in  terms  of 
IT,”  says  Shepherd. 

IT  next  plans  to  spin  up  Hadoop  environments 
to  analyze  data  about  options  for  alleviating  poverty 
in  specific  areas.  “We’re  interested  in  how  we  can 
use  newer  technology  to  get  the  best  information  to 
our  front  line  staff  so  they  can  make  better  decisions 
about  development,”  von  Friedeburg  says. 


Stephanie  Overby  is  a  freelance  writer  based  in 
Massachusetts. 
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5  Google  Glass:  Alive  and 
Well  in  the  Enterprise 
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BY  AL  SACCO 

In  January,  when  Google  shut  down  the  Glass  Explorer 
program  and  stopped  selling  its  smart  glasses  to  con¬ 
sumers,  the  media  generally  declared  Google  Glass 
dead.  But  companies  developing  Glass  applications  for 
enterprises,  under  a  program  called  Google  at  Work,  are 
adamant  that  the  future  still  looks  bright. 

"The  media  is  getting  it  wrong,"  says  Ian  Shakil,  CEO  of  Aug- 
medix,  a  Glass  at  Work  certified  partner  that  makes  software 
for  doctors  and  other  medical  professionals,  "Glass  is  not  dead. 
Glass  at  Work  is  alive,  growing  and  well," 

Google  Glass  had  some  early  adopters  in  the  healthcare  and 
public-safety  sectors,  but  those  workplace  applications  were 
overshadowed  by  negative  stories  about  Glass  in  the  consumer 
market,  such  as  those  focusing  on  privacy  concerns. 

When  Google  halted  the  Explorer  program,  the  company 
said  Glass  had  outgrown  its  home  in  the  Google  X  lab  and 
would  get  its  own  product  team  at  Google.  So  while  Google  did 
stop  selling  Glass  units  to  the  public,  its  decision  to  shut  down 
the  Explorer  program  "is  more  a  positive  than  a  negative  for  us," 
says  Hendrik  Witt,  CEO  of  Ubimax,  a  Glass  at  Work  partner.  "The 
Explorer  program  was  a  beta  program,"  he  says.  "Two  years  is  a 
long  period  for  a  beta  test." 

David  Lerman,  CEO  of  GuidiGO,  a  certified  Glass  partner  that 
provides  audiovisual  tours  for  museums  and  other  cultural 
institutions,  says  the  Glass  team's  move  out  of  Google  X  fur¬ 
ther  legitimizes  Glass.  "It  means  that  we  will  be  commercial¬ 
ized,"  Lerman  says,  "We  are  no  longer  a  lab  product,  we  will  be 
a  'real'  product." 


New  Focus  on  the  Enterprise?  Google  may  even  be  shift¬ 
ing  Glass  further  toward  the  enterprise  market.  "Google  is  so 
serious  about  the  enterprise,  they're  getting  rid  of  consumer," 
says  Kyle  Samani,  CEO  of  Pristine,  another  Glass  at  Work  part¬ 
ner.  "That's  how  I  read  it." 

The  startups  in  the  enterprise  market  say  their  biggest 
problem  is  damage  control:  answering  hundreds  of  questions 
about  whether  Glass  is  dead.  They  say  the  truth  is  that  Google 
continues  to  supply  hardware  to  Glass  at  Work  partners  and 
they  expect  Google  to  release  a  next-generation  Glass  hard¬ 
ware  product  in  the  near  future. 

"We  are  still  actively  marketing  and  developing  Glass-based 
solutions,  and  Google  has  not  stopped  support  or  sales  to 
enterprise  customers,  only  one-off  orders  to  individual  consum¬ 
ers,"  says  Brian  Ballard,  CEO  of  APX  Labs,  a  Glass  partner  that 
makes  software  connecting  smart  glasses  to  corporate  systems. 


Al  Sacco,  a  senior  editor  at  CIO.com,  covers  mobile  technologies. 
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Tell  a  Compelling  Story 

Recruiting  IT  security  talent  can  be  challenging,  unless  you  have  a  great 
elevator  pitch  by  phil  schneidermeyer 


Hiring  (and  retaining)  data  security 
talent  is  one  of  the  toughest  jobs  today, 
especially  after  a  slew  of  high-profile  data 
breaches  that  have  driven  demand  and 
salaries  sky-high.  Robert  S.  Allen,  chief 
security  officer  at  CNA,  a  major  commercial  insurance 
carrier,  is  tackling  that  challenge  by  making  sure  his 
company  has  an  attractive  story  to  tell  job  candidates. 
Allen  has  global  responsibility  for  information  security 
and  physical  security,  which  provides  a 
holistic  view  of  operational  risk. 


contractor  base?  What’s  your  approach  to  proac  tively  iden¬ 
tifying  areas  of  concern?  It  all  ties  together. 

How  do  you  close  the  deal  on  a  candidate  who  has 
other  options? 

The  CISO  role  is  akin  to  being  a  marketer  in  areas  such  as 
controls,  data  stewardship— and  that  extends  to  hiring.  Sell 
the  team  that  a  candidate  will  be  joining.  Sell  the  learning 
opportunities  and  the  entrepreneurial  nature  of  security. 


What  information  security  posi¬ 
tions  have  you  recently  filled? 

We’ve  filled  multiple  positions  recently— 
without  protracted  hiring  sequences.  Our 
success  is  based  on  reputation,  visibility 
in  the  industry  and  promoting  our  team 
environment,  which  includes  a  mix  of  on- 
the-job  training  and  learning  opportuni¬ 
ties.  It’s  a  compelling  combination  to  job 
candidates. 


Like  a 

marketer,  sell 
the  learning 
opportunities 
and the 

entrepreneurial 
nature  of 
security. 


Are  certifications  important?  Has  that  changed? 

The  bar  has  been  raised.  Certifications  are  important,  but 
that’s  a  base  requirement.  We  are  interested  in  what  a  can¬ 
didate  has  learned,  their  learning  approach,  and  how  they 
will  fit  with  the  team  and  our  culture. 

I’m  a  fan  of  the  communication  style  assessment,  which 
helps  us  to  understand  the  potential  fit  and  communica¬ 
tion  strengths.  Someone  with  the  best  security  technology 
skills,  but  with  poor  communication  and  adaptive  ability, 
will  be  very  limited  today,  because  we  interact  a  lot  with 
our  business  partners. 

Experience  within  teams  sol  ving  security  problems  tied 
to  process  outcomes  is  also  of  great  importance. 

In  the  future,  I  think  we’ll  be  working  more  closely  with 
HR  to  use  psycholinguistics,  not  only  to  improve  hiring 
practices  but  also  to  improve  our  understanding  of  the 
insider  threat.  How  well  do  you  know  your  employee  and 


With  IT  security  professionals  in 
the  driver's  seat,  what  are  they 
looking  for? 

They  want  to  know  whether  the  CISO  is 
a  leader  who  can  navigate  the  changing 
landscape  and  frame  the  company’s  com¬ 
mitment  to  security  overall. 

CNA  is  a  business  insurance  carrier.  We 
exude  a  professional  business  culture;  that 
includes  wearing  a  suit  and  tie  every  day 
and,  similar  to  Yahoo,  we  do  not  promote 
working  from  home.  From  the  outside  look¬ 
ing  in,  you  may  think  we  have  some  disadvantages  when 
trying  to  attract  top  security  talent,  especially  millennials. 

On  the  flip  side,  we  have  a  dynamic  security  team  with 
great  chemistry  that  values  collaboration.  In  addition,  we’re 
in  the  technology  insurance  segment  and  have  outstanding 
rapport  with  our  underwriters  and  risk-control  profession¬ 
als— even  rotating  security  staffers  into  business  roles. 

We  have  a  lot  more  to  offer  than  many  companies  where 
the  security  group  is  separate  from  the  business. 

Given  the  high  demand  for  security  professionals, 
what  advice  do  you  have  for  hiring  managers? 

Focus  and  play  to  your  strengths.  What’s  your  elevator 
pitch  to  candidates?  Do  you  have  a  compelling  story,  both 
for  security  and  for  your  company? 

Phi!  Schneidermeyer  is  a  partner  with  Heidrick  &  Struggles, 
where  he  specializes  in  recruiting  CIOs  and  CTOs. 
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Kurt  Roemer 

CHIEF  SECURITY 
STRATEGIST,  CITRIX  SYSTEMS 


As  Chief  Security  Strategist  for 
Citrix  Systems,  Kurt  Roemer 
leads  the  security,  compliance, 
risk  and  privacy  strategies  for 
Citrix  products.  As  a  member  of 
the  Citrix  CTO  Council,  Roemer 
drives  ideation,  innovation  and 
technical  direction  for  products 
and  solutions  that  advance 
business  productivity  while  en¬ 
suring  information  governance. 
An  information  services  vet¬ 
eran  with  more  than  25  years 
experience,  his  credentials  in¬ 
clude  the  Certified  Information 
Systems  Security  Professional 
(CISSP)  designation,  he  served 
as  Commissioner  for  the  U.S. 
public-sector  CLOUD2  initiative 
and  he  led  efforts  to  develop 
the  PCI  Security  Standards 
Council  virtualization  Guidance 
Information  Supplement  for  the 
payment  card  industry  while 
serving  on  the  Board  of  Advi¬ 
sors.  Kurt  is  an  active  member 
of  the  ETSI  NFV  (Network  Func¬ 
tion  Virtualization)  specification 
team,  and  is  Rapporteur  for 
developing  NFV  Security  and 
Trust  Guidance. 
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Mobility  and  the  Dynamics 
of  Networking 

Consumerization  and  BYO  driving  new  approaches  to  security 


Why  is  consumerization  driving 
fundamental  changes  to  our  concept  of 
networks  today? 

When  employees  buy  their  own  devices, 
cloud  services  and  applications,  they  can  wind 
up  utilizing  all  types  of  networks,  including 
LTE  networks  off  their  cell  phones  or  open 
wireless.  Most  don’t  use  enterprise  networks 
very  much  anymore.  That  bypasses  the  security 
architecture  put  in  place  by  the  IT  department 
to  provide  strong  data  governance.  It’s 
obvious  that  we  must  do  something  to  restore 
enterprise  governance  over  sensitive  data. 

How  does  that  change  the  way  that 
networks  are  going  to  be  secured? 

If  somebody's  using  their  BYO  device  and 
going  directly  to  the  cloud,  they’re  avoiding 
IT  policies  and  security  measures.  Consider 
the  payment  card  industry  data  security 
standard  [PCI  DSS],  PCI  requires  a  stateful 
network  firewall,  IDS-IPS,  anti-virus,  strong 
authentication  and  a  host  of  other  technologies 
that  can  include  a  Web  application  firewall. 
These  technologies  are  not  inherently  active  in 
every  cloud  service  that  people  buy. 

What  policies  should  be  in  place  to 
provide  for  secured  networking? 

Today  you  have  to  encrypt  all  application  and 
network  traffic  because  you  have  no  idea  what 
networks  these  BYO  devices  are  going  over. 

For  high  assurance,  mutual  authentication 
is  recommended;  for  example,  requiring 
client-side  certificates  for  somebody  who's 
administering  directory  services,  certificate 
management  and  particularly  sensitive 
applications.  Two  -factor  authentication, 
including  tokens,  smart  cards  and  biometrics, 
must  be  used  where  warranted.  A  strong  set 
of  logging  and  audit  policies  must  be  assured 
so  that  you  can  go  back  and  defensively  prove 
that  your  policies  were  complied  with  -  all  the 
way  down  to  an  individual  user  with  a  specific 
application  access  event. 

These  policies  are  not  necessarily  the 
same  as  what  was  enforced  in  the 
enterprise  network,  correct? 

Right.  When  setting  up  policies  to  address 
consumerization,  we  have  to  basically  assume 
that  the  devices,  users,  applications  and 
networks  are  constantly  under  attack  and  must 
be  constantly  verified.  We  must  configure  for  a 
specific  level  of  risk  and  apply  mitigations  that 


ensure  that  those  attacks  don’t  compromise  or 
disclose  sensitive  enterprise  data. 

What  kind  of  user  experience  should  we 
strive  for? 

Experience  is  the  key  to  security  success.  The 
experience  must  be  seamless,  automated  and 
an  inherent  part  of  the  service.  For  example, 
when  somebody  picks  up  a  device  and  clicks 
on  an  application,  they  should  have  a  micro 
VPN  immediately  and  automatically  kick  in  to 
set  up  the  right  connectivity.  That  way  they’re 
only  going  to  the  servers  they  should  and  to  the 
application  they  should.  The  data  is  protected 
without  any  additional  user  intervention 
or  device  configuration.  And  everything  is 
fully  logged  for  information  governance  and 
regulatory  compliance.  Mobile  back  ends  must 
have  security  as  part  of  the  profile,  specifying 
the  application  security,  the  network  security 
and  security  for  critical  services  like  DNS  to  be 
automatically  configured  to  mitigate  risks  to 
specific  applications  and  use  cases. 

Might  some  users  balk  at  security 
protocols  and  find  workarounds? 

Consumers  are  choosing  their  own  devices, 
applications  and  services.  It  makes  much 
more  sense  to  tailor  and  automate  enterprise 
security  to  the  way  users  will  work  anyway.  The 
experience  needs  to  make  sense  to  the  user, 
so  it’s  intuitive  why  they  have  to  go  through 
the  additional  security  tollgates  to  get  their  job 
done  when  working  with  sensitive  data  and 
scenarios. 

What  lies  ahead  in  terms  of  automating  a 
secure  user  experience? 

We’re  seeing  a  lot  more  mobile  application 
stores,  cloud  service  catalogs  and  service 
specifications  where  critical  security  controls 
such  as  next-gen  firewalls  and  Web  app 
firewalls  are  integrated.  And,  on  mobile 
devices,  containerization  protects  local  data 
and  interfaces  directly  with  enterprise  network 
services  for  authentication,  SSO,  encryption 
management  and  telemetry.  The  key  point 
is  that  higher  levels  of  automation  integrate 
security  into  both  an  enterprise  solution  and 
a  superior  user  experience.  Users  expect  that 
appropriate  security  will  be  in  effect  as  they 
bring  up  their  enterprise  apps,  and  IT  must 
deliver  this  experience  seamlessly  to  ensure 
mobile  users  are  always  in  compliance  with 
enterprise  policy.  ■ 
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Many  IT 
departments 
are  reorganizing, 
but  a  few 
companies  are 
taking  that  to 
the  extreme: 

Get  ready  for  the  disappear-  Br63kill& 

ing  IT  department.  Companies  traHi+irmal  IT 

including  Zappos,  GameStop,  113(11 110113,1 1 1 

Aetna  and  Accu Weather  have  lntO  DIGCGS 

restructured  IT,  sometimes  * 

radically,  to  respond  to  some 

harsh  economic  and  technologic  forces  bearing  down  on  CIOs. 

Zappos,  which  has  been  called  “one  of  the  most  blissed-out 
businesses  in  America,”  is  exploding  its  entire  hierarchy  to 
replace  it  with  what  might  be  the  equivalent  of  a  corporate  com¬ 
mune.  The  company  spent  2014  reinventing  itself  as  a  holacracy, 
embracing  an  organizing  principle  akin  to  democracy— including 
a  31-page  constitution. 

Spontaneity  and  distributed  power  are  hallmarks  of  holacracy, 
where  people  work  in  groups,  or  circles,  according  to  their  enthu¬ 
siasms.  The  circles  are  rearranged  as  new  projects  emerge  or 
colleagues  choose  to  pursue  something  else.  Employees  take  sug¬ 
gestions,  not  orders.  Decision-making  is  pushed  down,  often  to 
the  lowest  rungs  (if  there  were  rungs).  Former  managers  become 
“lead  links”  who  offer  coaching  but  don’t  approve  or  reject  ideas. 

“It’s  a  radical  approach,  and  we’re  passionate  about  trying  it,” 
says  Brent  Cromley,  CTO  at  Zappos.  “We  want  everyone  thinking 
about  how  we  can  improve  things,  not  just  a  select  few  at  a  time 
or  a  group  set  aside  to  do  innovation.” 

Traditional  org  charts  show  lines  and  boxes,  but  a  holacracy 
has  clots  of  circles  meant  to  merge  and  divide  like  amoeba  under 
a  microscope  (see  diagram,  page  22). 

Not  every  revamp  goes  to  the  Zappos  extreme  but  some  CIOs 
are  feeling  pressure  to  change  the  IT  group  amid  new  business 
realities.  Marketing  chiefs  and  other  non-IT  executives  now 
encroach,  or  want  to  encroach,  on  technology  decisions.  Tech  is 
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Zappos  reorganized  into  a  hoiacracy, 
which  emphasizes  spontaneity  and 
distributed  power.  "It's  a  radical 
approach,  and  we're  passionate  about 
trying  it,”  says  CTO  Brent  Cromley. 
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Really  Creative  DESTRUCTION 

No  boxes  here.  Zappos  turned  its  IT  organization  into  a  collection 
of  circles  and  adopted  the  name  of  a  mythical  creature. 


Amid  a  nap  room,  a  yoga  studio  and  a 
sandy- floored  beach-themed  conference 
room  at  Zappos  headquarters  in  Las  Vegas, 
the  350-member  IT  group,  dubbed  Unicorn, 
works  in  a  holacracy,  That's  an  organization 
akin  to  self-organizing  democracy-and  far 


from  the  traditional  step-ladder  hierarchies 
of  most  companies,  CEO  Tony  Hsieh  hopes 
the  new  structure  will  promote  innovation 
as  Zappos  grows,  The  tiny  colored  circles 
within  the  other  circles  represent  roles. 
Within  any  circle,  head  count  can  vary 


weekly  as  groups  divide,  merge  and  other¬ 
wise  rearrange  according  to  members'  pref¬ 
erences  and  priorities,  For  the  incomplete 
roles  in  red,  the  "lead  link"  (think  "manager" 
in  traditional  terms)  must  do  the  job  until 
she  assigns  it  to  someone  else,  -K.S.N 


Builds  a  strong  technical 
community  through  inter¬ 
nal  activities  (e,g„  training) 
and  external  awareness 
(e.g.,  public  blogging). 


Filled  roles 
•  Unfilled  roles 
■  Core  roles 
Incomplete  roles 


Unlabeled  groups  include  Mobile, 
the  User  Experience  Community 
of  Practice,  Zappos  People  Tools, 
Change  Mavens  and  the  Omega  Team 
(responsible  for  legacy  platforms), 


Focuses  on  a  long¬ 
term  strategy  to 
develop  advanced 
merchandising 
capabilities,  (RCAP 
is  short  for  "retail 
capabilities.") 


Conducts  retailing  experi¬ 
ments  to  shape  the  future  of 
Zappos.  A  recent  experiment 
by  this  San  Francisco-based 
circle  involved  a  service  to  let 
consumers  send  photos,  text 
and  hashtags  to  a  team  of 
Zapponians  who  try  to  find  any 
product  in  any  store,  even  if 
Zappos  doesn't  sell  it. 
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changing  faster  than  ever,  while  financial  slumps  and  internal 
bureaucracy  can  inhibit  quick  response.  And  customers  won’t 
wait.  Walt  Disney  Parks  and  Resorts  reorganized  its  global  IT 
operation  in  October,  aiming  to  double  the  share  of  technolo¬ 
gists  working  on  innovation  from  30  percent  to  more  than  60 
percent.  General  Electric  has  formed  agile  and  sometimes  self- 
governing  teams.  Other  CIOs  have  abolished  IT  groups  focused 
on  technologies,  such  as  email  or  the  data  center,  and  have  reor¬ 
ganized  to  target  business  goals,  such  as  customer  acquisition 
or  globalization,  says  Andrew  Horne,  a  managing  director  at 
the  Corporate  Executive  Board. 

Companies  are  struggling  to  transform  into  digital  versions 
of  themselves,  often  with  no  clear  idea  of  what  they  will  look  like 


at  the  end.  The  IT  group,  Home  says,  must  be  ready  for  anything. 

“We  see  companies  trying  to  create  a  structure  that  is  flexible 
enough  to  be  able  to  succeed  regardless  of  the  type  of  demand 
for  technology,  the  type  of  economy  or  the  direction  the  com¬ 
pany  goes,”  he  says. 

Done  well,  a  dramatic  overhaul  can  make  IT  responsive  to 
the  unknown.  Done  poorly,  you  fertilize  staff  resentment  about 
too  much  change  or  dead-end  jobs  on  legacy  systems.  There  are 
no  best  practices  for  the  bleeding  edge.  Just  a  few  intrepid  CIOs. 

Bom  to  Change 

As  soon  as  corporate  IT  was  born  six  decades  ago,  someone  no 
doubt  wanted  to  change  it.  We’ve  seen  the  pendulum  swing  from 
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"We  want  everyone  thinking  about 
how  we  can  improve  things,  not  just  a 
. . .  group  set  aside  to  do  innovation." 

-Brent  Cromley,  CTO,  Zappos 


centralized  to  decentralized  and  back.  Invis¬ 
ible  backroom  mechanics  became  service 
providers,  who  became  business  partners. 

What’s  different  today  is  the  degree  of 
uncertainty  about  what  the  IT  group  is  if 
virtually  all  companies  are  now  built,  top 
to  bottom,  on  technology.  CIOs  themselves 
are  divided  about  their  own  futures.  In  our 
2015  State  of  the  CIO  survey,  49  percent 
of  558  IT  leaders  said  they’re  destined 
to  become  managers  of  contractors  and 
cloud  vendors— hardly  strategic.  Indeed, 
sometimes  old  ideas  and  established  lead¬ 
ers  don’t  cut  it.  RSA  Insurance  Group  in 
London  cleaned  house  last  year,  replacing 
several  senior  executives,  including  all  IT 
leaders  and  the  CIO. 

RSA  also  created  the  position  of  chief 
digital  officer  as  it  tries  to  move  to  “more 
disciplined  and  effective  use  of  technology.” 

At  Aetna,  a  move  to  explore  ways  of 
generating  new  revenue  led  the  health 
insurer  spin  out  a  new  business  unit 
from  IT  in  2011.  The  unit,  rebranded  as 
Healthagen  in  2013,  includes  technol¬ 
ogy  and  health  companies  Aetna  had 
acquired,  and  it  offers  new  services  based 
on  data  analytics.  Hospitals,  physicians 
and  employers  buy  software  and  data 
products  from  Healthagen,  essentially 
making  it  a  vendor,  says  Brian  Garcia, 
CTO  of  the  unit.  It  could  offer  an  alter¬ 
native  career  path  for  Aetna’s  IT  profes¬ 
sionals— Garcia  used  to  be  Aetna’s  chief 
architect  for  software. 

Race  for  Creativity 

Innovation— the  desire  to  nurture  it,  the 
fear  of  it  fizzling— is  a  prime  driver  of  big 
IT  reorganizations.  But  finding  the  best 
IT  structure  for  promoting  innovation 
is  a  problem  that  continues  to  vex  CIOs. 
Seventy-four  percent  of  the  respondents 
to  our  State  of  the  CIO  survey  said  it’s 
challenging  to  find  the  right  balance 
between  business  innovation  and  opera¬ 
tional  excellence. 

The  dramatic  restructuring  at  Zap¬ 


pos  is  intended  to  reignite  innovation, 
says  CTO  Cromley.  The  online  retailer, 
which  started  with  shoes  and  now  sells 
all  kinds  of  clothing  and  accessories  as 
part  of  Amazon.com,  has  never  been  a 
typical  company.  Employees  are  known 
as  Zapponians,  and  they  live  to  wow  cus¬ 
tomers.  In  fact,  the  company’s  No.  1  core 
value  is  to  “deliver  wow  through  service.” 
Passion  and  “a  positive  team  and  family 
spirit”  are  also  key  values  promoted  with 
frequent  off-site  meetings,  occasional  cos¬ 
tume  parties  and  intense  “culture”  train¬ 
ing.  CEO  Tony  Hsieh  contends  that  happy, 
engaged  employees  are  naturally  creative, 
and  creativity  engenders  customer  satis¬ 
faction  and  loyalty. 

As  Zappos  grew,  however,  Hsieh  and 
fellow  leaders  worried  that  the  company 
would  lose  its  edge.  They  are  counting  on 
the  new  holacracy  to  wipe  out  any  creep¬ 
ing  complacency. 

To  remind  Zapponians  just  how  dif¬ 
ferent  they  are  expected  to  work  now,  the 
company  renamed  its  traditional  depart¬ 
ments.  Marketing  is  now  Life  Cycle.  The 
core  retail  business  is  Flywheel  Opera¬ 
tions.  IT  is  Unicorn,  after  Hsieh’s  favor¬ 
ite  creature.  As  Cromley  explains,  “We 
stayed  away  from  tech  or  IT  because  they 
put  you  in  the  mindset  of  legacy  organiza¬ 
tional  structures.” 

And  losing  legacy  thinking  is  critical 
to  making  the  new  plan  work. 

Most  of  Unicorn’s  350  staff  members 
are  organized  into  work  circles,  such  as 
Zappos  Labs  for  performing  untradi- 
tional  retailing  experiments  and  Super- 
Cloud  for  the  extensive  implementation 
of  Amazon’s  cloud  computing  services.  At 
least  50  circles  exist  within  Unicorn,  but 
the  number  isn’t  permanent:  Reorganiza¬ 
tions  occur  weekly,  as  projects  shift,  roles 
change  and  power  is  redistributed.  The 
goal  is  to  keep  cross-pollinated  thinking 
in  play.  “We  want  people  to  know  [that] 
nothing’s  stopping  you,”  Cromley  says. 

Holacracy  isn’t  easy  to  get  used  to. 
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Anyone  can  propose  a  change.  Everyone  can  see  what  changes 
are  happening  in  any  circle. 

Initially,  Zappos  hired  an  outside  consulting  company  to  teach 
holacracy  principles  in  a  four-day  program.  Zappos  soon  assumed 
responsibility  for  training,  cutting  the  session  to  three  days  and 
offering  employees  ongoing,  targeted  classes  and  webinars. 

When  Unicorn  members  fall  into  old  patterns,  perhaps 
asking  Cromley  to  approve  an  idea,  he  reminds  them  that  he’s 
there  to  guide,  not  dictate.  “Some  people  are  afraid  of  owning 
decisions  or  giving  up  control,”  he  says. 

Knowing  whether  holacracy  is  working  isn’t  easy  either.  Crom¬ 
ley  says  he’ll  recognize  it  when  he  sees  big  innovations  enacted 
without  knowing  they  were  even  in  the  works.  “We’ve  seen 
glimpses  of  that  but  haven’t  seen  the  breakthrough  yet,”  he  says. 

For  example,  there  have  been  some  promising  user-expe¬ 
rience  experiments  from  a  circle  that  spontaneously  emerged 
to  create  a  consistent  Zappos  digital  experience  across  all  cus¬ 
tomer  contact  points,  including  fulfillment,  shipping,  Web, 
email  and  marketing.  “This  is  a  self-organized  group  passion¬ 
ate  about  solving  this  problem,”  he  says. 

Split  Personality 

If  holacracy  sounds  unruly,  there  are  other  ways  for  CIOs  to 
make  dramatic  changes  in  IT  mindset  and  performance.  Game- 
Stop,  a  $9  billion  gaming  retailer,  last  year  split  IT  into  four 
groups:  Delivery,  which  includes  application  development 
and  support  services;  Architecture,  responsible  for  orchestrat¬ 
ing  cloud  providers,  among  other  tasks;  Enterprise  Strategy, 
which  figures  out  how  to  implement  major  new  technologies; 
and  GameStop  Technology  Institute  (GTI),  which  is  focused  on 
customer  experience  and  product  innovation. 


"You  have  to  be  careful 
about  how  much  change  any 
one  part  of  the  organization 
is  going  through. 

-Andrew  Home,  a  managing  director,  Corporate  Executive  Board 


After  studying  the  many  roles  a  modern  CIO  is  expected  to 
assume,  GameStop  decided  that  carving  IT  into  defined  por¬ 
tions  and  installing  a  leader  for  each  would  be  a  more  effective 
approach,  says  Jeff  Donaldson,  senior  vice  president  of  GTI  and 
the  company’s  former  CIO.  “We  came  to  the  conclusion  that  it’s 
really  ridiculous  to  expect  that  one  professional  can  operate 
effectively  across  all  of  those  personas,”  he  says. 

GTI  works  with  IBM,  Texas  A&M  University  and  24  other 
outside  organizations.  These  partners  help  GameStop  assess 
the  economy,  emerging  technologies,  customer  behaviors  and 
other  criteria  for  weak  signals  about  coming  change. 

Donaldson  declines  to  name  his  other  external  partners, 
but  says  they  cover  important  territory  too  wide  for  any  one  IT 


leader  to  tackle.  There’s  a  partner  to  delve  into  changing  notions 
about  privacy.  A  partner  to  look  for  nascent  shifts  in  customer 
expectations,  and  one  for  exploring  augmented  reality.  The  list 
goes  on,  including  a  partner  to  help  interpret  all  the  incoming 
information  from  other  partners.  Getting  help  like  this  means 
“you’re  not  spreading  the  peanut  butter  too  thin,”  he  says. 

The  goal  of  the  reorganization  is  to  keep  GameStop  on  top. 
Its  main  business  is  selling  new  and  used,  physical  and  digital 
video  games  for  Xbox,  PlayStation  and  Wii  consoles.  GameStop 
lists  key  competitors  as  Wal-Mart,  Target  and  Amazon— not 
exactly  a  retiring  bunch. 

But  they  all  face  digital  demons  as  gaming  goes  online  at  a  fast 
clip.  Knowing  that  people  shop  tethered  to  their  smartphones, 
GameStop,  through  GTI,  is  working  on  integrating  new  technol¬ 
ogy,  such  as  interactive  marketing  using  beacons,  in  its  stores. 
Donaldson  wants  to  meld  the  online  and  in-person  experience. 

All  of  GameStop’s  C-level  executives  were  involved  in  hatch¬ 
ing  the  plan  to  split  IT  and  all  have  been  involved  in  educating 
employees  about  it.  One  early  obstacle  was  convincing  the  rest 
of  the  company  that  four  separate  IT  groups  could  work  well 
together,  he  says. 

“People  want  to  know  what  the  processes  are,  but  some  of 
those  will  be  invented  during  the  change  and  tweaked  along 
the  way,”  he  says.  “People  have  to  be  willing  to  go  down  that 
path  with  you.” 

GameStop  rented  a  local  movie  theater  for  the  initial  dis¬ 
cussion  with  employees.  The  CEO  was  there,  and  that  made  a 
difference.  “If  he  stands  in  front  of  us  and  says,  ‘This  is  some¬ 
thing  important  to  me  and  for  our  future,’  then  85  percent  to 
90  percent  of  the  organization  will  immediately  support  the 
change,”  Donaldson  says. 

Even  a  year  later,  GameStop  isn’t  done  figuring  out  its  future. 
Stores  in  Austin,  Texas,  are  testing  beacons  and  other  interac¬ 
tive  customer  services.  The  company  plans  to  bring  the  same 
technologies  to  three  more  markets  later  this  year. 

Everyone  has  to  be  able  to  work  with  ambiguity.  “You’re 
doing  something  new,  and  there’s  not  a  lot  of  prior  art  to  look 
at,”  Donaldson  says. 

Relentless  March 

Accu Weather  has  spent  the  past  few  years  reworking  its  struc¬ 
ture,  bit  by  bit.  In  2012,  the  company  spun  out  an  innovation 
group  of  engineers,  mainly  from  IT,  to  do  advanced  research  for 
customers,  especially  in  predicting  severe  weather  and  improv¬ 
ing  forecast  accuracy.  In  2013,  it  reordered  its  executive  ranks, 
formalizing  digital  work  that  was  already  going  on.  CIO  Steve 
Smith  became  chief  digital  officer,  working  with  a  new  chief 
strategy  officer  who  had  been  in  charge  of  digital  media. 

Last  year,  IT  got  a  makeover.  The  company  took  the  two 
branches  of  IT— development  and  operations— and  split  each 
one  into  daily  work  and  strategic  work.  New  directors  of  strat¬ 
egy  for  each  branch  make  technology  plans  for  one,  two  and 
three  years  out,  says  Chris  Patti,  vice  president  of  technology. 

A  relentless  march  to  digital  business  has  also  influenced 
IT  changes,  and  Accu  Weather  looks  to  technology  companies 
like  Google  and  Yahoo  as  models,  Patti  says.  After  all,  major 
sources  of  revenue  for  Accu  Weather  are  advertising  sales  at  its 
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Web  properties,  as  well  as  mobile  appli¬ 
cations  and  its  API  business.  And,  like 
Google  and  Yahoo,  “we  produce  tech  to 
empower  people,”  he  says. 

Meanwhile,  Accu Weather  has  moved 
some  functions  that  were  historically  part 
of  sales  and  other  business  groups  into 
IT.  The  company  has  always  sold  weather 
information,  starting  with  forecasts  in 
print  and  on  video.  Now  the  products 
are  mainly  data  files  and  application  pro¬ 
gramming  interfaces  (API)  for  digital  ser¬ 
vices  that  customers  can  build  on  the  fly. 

The  sales  team  had  been  managing 
these  offerings.  But  as  the  products  grew 
increasingly  technical,  sales  would  often 
have  to  email  IT  engineers  with  custom¬ 
ers’  questions.  Then  the  norm  became 
having  IT  staffers  join  customer  calls  to 
explain  product  details. 

Last  year,  to  field  these  calls,  the  com¬ 
pany  created  the  role  of  technical  account 
manager  and  filled  the  jobs  with  technol¬ 
ogy  leaders.  “It’s  more  appropriate  to  put 
them  in  IT,”  Patti  says. 

He  advises  fellow  technology  leaders 
to  accept  that  today’s  IT  group  must  work 
in  multiple  ways— as  developers,  consul¬ 
tants  and  facilitators.  Sometimes  you’ll 
build  a  mobile  app  to  realize  a  business 
goal.  Other  times  you’ll  consult  with  the 
marketing  department  as  it  buys  its  own 
technology.  You  might  help  HR  negotiate 
a  contract  with  a  vendor.  As  technologists 
at  Accu  Weather  delved  into  different 
roles,  they  received  training  in  soft  skills 
such  as  listening  and  phone  etiquette. 

Avoiding  Trouble 

With  big  change  comes  the  potential  for 
big  problems.  Approach  is  everything, 
says  Horne  at  the  Corporate  Executive 
Board.  While  the  CIO  might  absorb  the 
new  world  order,  staffers  can  easily  revert 
to  safe  old  ways.  This  underlines  the  dan¬ 
gerous  perception  that  IT  is  bureaucratic 
and  undermines  the  new  image  IT  is  try¬ 
ing  to  project.  “IT  often  runs  to  make 
organizational  changes  and  [everyone  is] 
underwhelmed  by  results  because  they 
have  the  same  people  and  often  the  same 
processes,”  Horne  says. 

One  advantage  GameStop  has  is  a 
built-in  culture  of  lateral  communication, 
Donaldson  says.  There  may  be  titles  and 
hierarchy  but  discussion  and  decision¬ 
making  cross  those  boundaries.  “You 


need  that,”  he  adds. 

Even  at  Zappos,  where  processes  very 
definitely  changed  for  everyone,  Crom- 
ley  finds  that  he  must  remind  himself 
to  break  a  habit  of  making  decisions  for 
others.  “Yesterday,  someone  came  to  me 
to  sign  off  on  something.  I  had  to  say,  ‘I 
can  give  you  my  advice  but  this  is  your 
responsibility  to  decide,”’  he  says.  “That’s 
one  thing  that’s  hard  for  me  to  give  up.” 

When  rearranging  IT,  don’t  make 
the  mistake  of  dividing  the  group  into 
modern  and  legacy  systems,  Horne  says. 
It’s  tough  to  make  the  backwater  sound 
interesting,  and  people  stuck  there  grow 
resentful  if  they  feel  they’re  not  working 
on  anything  innovative.  “One  company 
called  it  the  ‘heritage’  IT  team.  Didn’t  last 
very  long,”  he  says. 

To  avoid  that,  CIOs  should  consider 
matching  the  IT  staff  to  business  activi¬ 
ties.  Working  on  customer  acquisition,  for 
example,  could  include  a  mix  of  old  and 
new  technologies,  which  is  more  satisfy¬ 
ing  for  more  people,  Horne  says. 

IT  might  organize  around  20  or  30 
such  activities,  setting  funding  and 
speed  at  a  different  level  for  each  one. 
First,  decide  where  IT  must  excel  and 
where  it’s  OK  to  dare  to  be  mediocre.  For 
example,  if  staying  ahead  of  customer 
habits  provides  competitive  advantage, 
concentrate  on  analytics  and  let  human 
resources  applications  simply  be  service¬ 
able,  he  advises. 

Finally,  beware  of  too  much  change, 
Horne  says.  The  average  employee  expe¬ 
riences  a  significant  change,  such  as  a 
reorganization  or  the  arrival  of  a  new 
boss,  every  seven  months,  according  to 
CEB  research.  But  it  can  take  two  years 
for  someone  to  absorb  the  change  and 
return  to  full  productivity.  “You  have  to  be 
careful  about  how  much  change  any  one 
part  of  the  organization  is  going  through,” 
Horne  says. 

GameStop’s  IT  restructuring  has 
altered  Donaldson  as  a  leader.  Collabo¬ 
rating  with  futurists,  researchers  and 
venture  capitalists  has  jump-started  his 
curiosity  about  problem-solving  and  his 
interest  in  shaping  the  company’s  future. 
“This  lights  up  neurons,”  he  says.  “There’s 
nothing  better  than  that.”  BE] 


Kim  S.  Nash  is  a  former  managing  editor  of 
CIO  magazine. 
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New  Roles,  New  Titles 


CIOs  are  creating  new  IT/business  positions  as  they  focus 
on  customer  experience  and  analytics 

CHRIS  COYE,  DISNEY/ABC  TELEVISION  GROUP,  THE  WALT  DISNEY  CO. 

BUSINESS  TECHNOLOGY  PARTNERS,  DATA  ENGINEERS 


Chris  Coye, 

SVPandCIO, 
Disney/ABC 
Television  Group 


As  the  business  landscape  has  evolved,  we  are  playing  catch-up  to  hire  the  skill  sets 
needed  in  IT.  One  of  the  biggest  trends  is  the  consumerization  of  IT.  Employees  don’t 
want  to  use  25-year-old  systems  to  do  the  same  things  they  do  at  home  using  Google  or 
Facebook.  In  response,  we  are  creating  roles  for  business  technology  partners— people 
who  can  deliver  systems  that  are  more  like  the  experience  that  employees  get  outside 
of  the  office.  These  roles,  which  in  the  past  may  have  been  systems  managers,  have 
business  acumen  first  and  foremost.  They  have  the  ability  to  communicate  directly 
with  clients,  and  are  able  to  understand  clients’  businesses,  translate  their  needs  and 
hand  off  their  requirements  to  a  group  that  can  build  and  deliver  systems. 

In  the  data  analytics  field,  we  are  hiring  for  data  engineering  roles  instead  ►  ►  ► 


Cynthia  Conde, 

CIO  and  head  of  IS 
for  North  America, 
Sanofi 


Jim  Cole, 

former  SVP  and  CIO, 
First  National  of 
Nebraska 


|!®|  The  GO  Executive  Council  is  a  global  peer  advisory  community  dedicated  to  advancing  the  IT  profession  by 
developing  leaders  and  helping  them  make  more-informed  decisions,  To  learn  more,  visit  council.cio.com. 
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of  business  intelligence  positions.  We  refocused  our  team  and  titles  on  data 
engineering  about  two  years  ago  to  reflect  IT’s  position  as  a  technology 
function  that  provides  a  platform  for  the  business  to  use.  So  we  are  hiring 
data  engineer  team  members  to  define  and  build  the  platform. 

CYNTHIA  CONDE,  SANOFI 

UX  DESIGNERS,  INTEGRATION  SPECIALISTS 

We  are  evolving  our  IT  professional  landscape  to  include  roles  that  are  more 
strategic  and  business-focused,  such  as  solution  architects,  project  manag¬ 
ers  and  service  owners  who  can  deliver  IT  from  an  end-to-end  business 
service  perspective  rather  than  by  traditional  technology  towers.  We  have 
a  broad  range  of  systems  and  services  that  span  external  providers  and 
on-premises  solutions.  We  need  people  who  can  look  after  the  whole  solu¬ 
tion  in  the  context  of  a  business  service,  and  not  just  at  the  individual  parts. 

With  big  data,  cloud,  mobile  and  social,  we  need  to  meet  the  needs  of  a 
digital  world.  Our  internal  users,  external  customers  and  consumers  have 
greater  expectations  of  how  they  interact  with  technology.  This  is  a  call  to 
action  for  us  to  embrace  new  roles,  such  as  user  experience  designers  who 
bring  a  “design  eye”  to  the  development  process  and  focus  on  simplifying 
the  user  experience  and  enhancing  productivity. 

Other  new  roles  are  data  scientists,  who  understand  how  data  is  used  in 
the  business  process  and  help  glean  business  value  from  data,  and  integra¬ 
tion  specialists,  who  understand  internal  systems,  third-party  cloud  solu¬ 
tions  and  other  partners  to  ensure  seamless  high-performing  services.  This 
is  a  complex  challenge  requiring  professionals  who  understand  the  entire 
ecosystem,  have  a  service  bent  and  know  how  to  link  systems  to  provide 
the  right  solutions  and  services. 

JIM  COLE,  FORMERLY  AT  FIRST  NATIONAL  OF  NEBRASKA 

CX  MANAGERS,  EMERGING  TECHNOLOGISTS 

We’ve  redesigned  our  organization  to  focus  on  the  customer  and  the 
employee.  Any  customer-facing  system— whether  on  the  Web,  voice  or 
mobile— is  now  the  responsibility  of  the  application  manager  of  customer 
experience.  This  new  role  was  created  to  provide  continuity  among  systems 
that  a  customer  sees  and  touches.  We  used  to  be  mired  in  the  whole  concept 
of  channel  delivery— we  aligned  applications  for  the  Internet,  phone  or 
mobile.  Now  we  have  a  single  manager  with  a  retail  banking  and  customer 
service  background  who  oversees  all  applications  to  bring  things  together 
in  a  common  customer  experience. 

We  have  a  similar  approach  for  employee  systems.  Previously,  we  did 
not  focus  on  making  it  seamless  for  employees  to  access  systems  from  mul¬ 
tiple  lines  of  business.  To  help  customers  with  business  across  multiple 
systems— credit  card,  mortgage  or  a  savings  account— an  employee  had  to 
log  on  to  a  separate  system  for  each  product.  So  we  created  a  manager  of 
the  customer  experience  position  and  hired  a  technologist,  since  so  many 
of  our  employee  systems  interact  with  core  banking  applications.  We  also 
have  two  “emerging  technologists”  whose  job  is  to  find  out  what  technology 
developments  will  affect  banking  and  the  business  in  the  next  five  years. 

(Since  this  interview,  Cole  has  become  EVP  and  CIO  at  Arvest  Bank.) 
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Tuned  In  to  Technology 

For  NBCUniversal,  technology  channels  innovation  for  sports,  film,  TV  and 
theme  park  offerings  by  atish  banerjea 

Just  a  couple  of  years  ago,  the  NBCUniversal  technology  organization 

was  largely  a  back-office  IT  group  that  was  not  very  well  connected  with  business 
unit  leadership. 


Service  levels  reflected  this  disconnect,  which  had 
resulted  from  years  of  underinvestment.  IT  needed  to  be 
repositioned  as  a  business  partner  that  could  help  move 
the  company’s  strategic  agenda  forward. 

To  gain  the  business’s  confidence,  we  first  needed  to 
improve  our  core  IT  services.  This  required  investing  in 
infrastructure  and  IT  talent,  which  Comcast,  our  new  par¬ 
ent  company,  was  willing  to  do.  We  looked  for  areas  that 
employees  would  really  notice, 
like  improving  the  help  desk, 
increasing  email  inbox  capacities 
and  upgrading  our  mobile  and 
desktop  devices.  When  we  moved 
our  offshore  help  desk  to  Louis¬ 
ville,  Ky.,  average  satisfaction 
scores  went  from  less  than  1  to  4.6 
on  a  scale  of  1  to  5  in  six  months. 

We  also  virtualized  servers  in  our 
data  centers,  so  we  can  affordably 
increase  capacity  while  also  being 
more  eco-friendly. 

We  embedded  CIOs  within 
our  businesses,  enabling  these 
local  CIOs  to  partner  with  busi¬ 
ness  leadership  on  strategic 
projects.  They  can  also  tap  into 

the  core  IT  capabilities  provided  by  the  centralized  technol¬ 
ogy  organization.  This  matrix  structure  lets  us  enjoy  the 
benefits  of  centralization  and  the  agility  of  local  delivery. 

We’ve  seen  real  business  benefits  from  this  approach.  In 
partnership  with  our  ad  sales  team,  for  example,  we  were 
able  to  simplify  our  previously  fragmented  asset  suite 
into  a  single,  comprehensive  and  customizable  portfolio, 
supporting  companywide  ad  sales  efforts  for  our  TV  and 
digital  platforms.  This  has  allowed  the  sales  team  to  signifi¬ 
cantly  grow  top-line  revenue  and  profitability. 


Another  example  is  in  our  sports  business,  which 
broadcasts  large-scale  events  such  as  the  Olympic  Games. 
The  CIO  for  the  sports  group  teamed  with  business  lead¬ 
ers  to  develop  a  system  that  will  help  make  remote  event 
productions  more  efficient  and  profitable.  We  expect  to  see 
benefits  from  this  new  system,  beginning  with  the  2016 
Olympic  Games  in  Rio  de  Janeiro. 

We’re  also  increasing  our  engineering  talent  pool  to 
move  the  business  forward  with 
technology  innovations.  We  are 
improving  our  hiring  and  reten¬ 
tion  practices  for  this  group,  and 
have  developed  a  world-class 
facility  at  our  NBCUniversal 
Technology  Center  in  New  Jer¬ 
sey,  featuring  open  floor  plans, 
telepresence  and  digital  displays. 

We’re  also  working  with  start¬ 
ups  to  pilot  emerging  technolo¬ 
gies  such  as  access  control  and 
navigation  tools  for  our  theme 
parks.  Data  analytics  is  another 
huge  growth  area  for  us,  with 
the  goal  of  delivering  even  more 
value  to  our  advertisers  and  con¬ 
tent  consumers. 

We  are  much  better  connected  to  the  business  lines  that 
we  support  than  we  were  a  couple  of  years  ago.  Now,  we 
have  CIOs  for  each  line  of  business  sitting  at  the  table,  talk¬ 
ing  about  the  value  that  technology  can  offer  from  a  busi¬ 
ness  perspective,  and  our  business  leaders  have  confidence 
in  coming  to  them  with  the  challenges  they  need  to  solve. 

Atish  Banerjea  is  executive  vice  president  and  CIO  at  media  and 
entertainment  company  NBCUniversal.  He  is  a  member  of  the 
CIO  Executive  Council. 
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NEWSLETTER 


Security  Smart  is  a  quarterly  security  awareness  newsletter  ready 
for  distribution  to  your  employees — saving  you  precious  time  on 
employee  education!  The  compelling  content  combines  personal 
and  organization  safety  tips  so  is  applicable  to  many  facets 
of  employees'  lives.  And  the  easy  to  read  design  has  multiple 
entry  points  so  you  are  assured  that  your  intended  audience  of 
employees — your  organization's  most  valuable  assets — will  read 
and  retain  the  information. 


Subscribe  today! 


To  view  a  sample  issue  of  the  newsletter,  learn  about  the 
delivery  options  and  to  subscribe  visit: 

www.SecuritySmartNewsletter.com 


For  more  information  please  visit 

www.SecuritySmart.com 

Security  Smart  is  published  by  CSO,  a  business  unit  of  CX0  Media.  ©  201 2  CXO  Media  Inc. 
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[C-LEVEL  VIEW] 


Keep  It  Simple,  CIOs 

Ditch  the  50-page  documents  in  favor  of  one-pagers,  says  Satish  Bapat, 
CEO  of  ING  Lifejapan  by  martha  heller 


How  is  technology  changing 
ING  Life  Japan  as  a  business? 

IT  drives  our  business  along  three 
points  of  a  triangle:  the  backbone, 
user  experience  and  information. 
At  the  center  is  innovation. 

How  are  you  using  information 
for  business  impact? 

We  have  several  products  that 
mature  over  a  10-year  period,  and 
policyholders  keep  an  eye  on  the 
market  to  decide  whether  to  keep 


How  do  you  coach  your  IT  lead¬ 
ers  to  do  that? 

I  emphasize  three  things:  Make  it 
a  one-pager,  make  it  visual,  and 
include  three  points  to  act  on. 

How  are  you  improving  user 
experience? 

We’ve  developed  an  online  video 
training  platform,  ING  Tube,  which 
provides  high-quality  information 
on  products,  compliance  issues  and 
other  business-related  topics  to  our 


munication.  I  go  back  to  simplicity. 
Sometimes  with  IT,  we  try  to  build 
something  to  get  us  to  the  moon, 
when  we  really  just  need  to  go  from 
Tokyo  to  Osaka.  It’s  all  about  incre¬ 
mental  innovation.  I  want  to  see  the 
long-term  strategy,  but  I  also  want 
to  see  real  deliverables  every  three 
months.  We  shouldn’t  have  to  wait  a 
decade  before  we  see  IT  value. 

How  do  you  create  an  innova¬ 
tive  culture? 

Rather  than  have  one  group  dedi¬ 
cated  to  innovation,  we  put  small 
teams  together  and  ask  them  to  think 
about  improving  our  underwriting 
process,  for  example.  It  could  be  as 
simple  as  reducing  a  15-page  appli¬ 
cation  form  to  a  one-pager.  These 
groups  meet  several  times  a  year  to 
brainstorm  ideas.  They  can  be  crazy 
ideas,  small  ideas— it  doesn’t  matter. 
Just  come  up  with  ideas. 


Bring  only  the 
right  information 
to  the  attention  of 
senior  leaders. 


their  policy  until  it  matures  or  sur¬ 
render  early.  We  now  have  historical 
data  on  how  market  changes  impact 
policyholder  activity;  we  are  better 
able  to  predict  customer  behavior 
and  support  our  clients’  decisions. 

i 

How  do  you  ensure  business 
leaders  are  using  information 
effectively? 

It  is  all  about  simplicity.  Some  man¬ 
agers,  inside  of  IT  and  out,  pride 
themselves  on  their  50-page  docu¬ 
ments  and  100-page  slide  decks.  But 
to  really  be  effective,  they  will  bring 
only  the  right  information  to  the  j 
attention  of  senior  leaders. 


distribution  partners,  with  the  aim 
of  improving  the  quality  of  advice 
they  deliver  without  having  agents 
travel  miles  to  attend  the  training. 
We  are  also  arming  our  salesforce 
with  iPads.  Our  salesforce  now  has 
mobile  applications  that  allow  them 
to  access  information  and  be  more 
effective  when  meeting  with  distri¬ 
bution  partners  and  clients. 

What  makes  a  successful,  influ¬ 
ential  IT  team? 

Successful  CIOs  have  direct  access 
to  the  CEO,  think  less  about  technol¬ 
ogy  and  more  about  business,  and 
understand  the  importance  of  com¬ 


What  in  the  world  of  technol¬ 
ogy  is  exciting  to  you? 

When  I  worked  on  my  master’s 
degree  many  years  ago,  I  needed 
information  on  a  group  of  compa¬ 
nies,  so  I  visited  multiple  libraries 
and  sifted  through  piles  of  micro¬ 
films;  it  took  me  three  months.  Now 
I  can  get  that  information  in  five 
minutes.  The  speed  of  information 
is  truly  mind-blowing.  The  key  is 
to  avoid  getting  buried  in  data  and 
focus  on  real  information. 


Martha  Heller  is  president  of  executive 
recruiting  firm  Heller  Search  Associates 
and  author  of  The  CIO  Paradox.  Follow 
her  on  Twitter:  @marthaheller, 
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MARKETPLACE 


Data  Center 

P  re-terminated 

Patch  Panel  System 


Adding  a  single  patch  panel? 

It  is  the  21st  century  and  life  should  be  simpler,  faster,  and  better. 
So  why  are  you  still  pulling  cables,  punching  down  panels  and 
making  a  mess  of  your  data  center  cabling  project?  It’s  time  to 
look  into  a  21st  century  cabling  system  solution. 

Introducing  Cablesys’  Simplified  Cabling  System  -  Pre-terminated, 
Pre-bundled,  Pre-labeled,  and  Ready-to-go.  With  a  single 
screwdriver  you  can  install  the  patch  panels  in  minutes  without 
the  need  to  hire  additional  certified  technicians  or  wait  for 
materials  from  multiple  vendors.  Better  yet,  each  Simplified 
Cabling  System  comes  with  a  15  year  end-to-end  performance 
warranty  right  out  of  the  box. 

One  screwdriver,  15  year  warranty,  installed  in  minutes  and  save 
50%  or  more*.  This  is  the  21st  century  Cabling  System  -  Simplified. 

CABLEJY^ 

Cabling  Systems  Simplified 

cablesys.com  800-555-7176  cs@cablesys.com 

©Copyright  2015,  Cablesys  ^Compared  to  the  20th  century  cabling  method. 
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dtSearch 


The  Smart  Choice  for  Text  Retrieval®  since  1991 


Instantly  Search 
Terabytes  of  Text 

25+  fielded  and  full-text  search  types 


dtSearch's  own  document  filters  support  "Office,"  PDF, 
HTML,  XML,  ZIP,  emails  (with  nested  attachments),  and 
many  other  file  types 


Supports  databases  as  well  as  static  and  dynamic  websites 

Highlights  hits  in  all  of  the  above 

APIs  (including  64-bit)  for  .NET,  Java,  C++,  SQL,  etc. 


Ask  about  fully-functional  evaluations 

www.dtSearch.com  i-800-u- finds 


"lightning  fast"  Redmond  Magazine 


"covers  all  data  sources"  eWeek 


"results  in  less  than  a  second"  InfoWorld 


hundreds  more  reviews  and  developer 
case  studies  at  www.dtsearch.com 

dtSearch  products: 

Desktop  with  Spider 

Network  with  Spider 

Publish  (for  portable  media) 

Web  with  Spider 

Engine  for  Win  &  .NET  -  SDK 

Engine  for  Linux  -  SDK 

Engine  for  Android  -  SDK  \>e& 

Document  filters  -  included 
with  oil  products ,  and  also 
available  for  separate  licensing 


CM 


Labor  Certification  Ads 


Are  you  an  individual,  agency  or  law 
office  needing  to  place  ads  to  fulfill 
legal  requirements? 

Let  us  help  you  put  together 
an  efficient,  cost  effective  program 
that  will  help  you  place  your  ads 
quickly  and  easily. 


For  more  details,  contact  us 

at:  888.455.4646 

iTlcareers 


Didn't  find  the  IT  career 
that  you  were  looking  for? 


Check  back  with  us  for  fresh  listings 
placed  by  top  companies  looking  for 
skilled  professionals  like  you! 


IT  careers 


Computer  Profls  (East  Windsor,  NJ)  IT  Firm:  SR.  PROGRAMMER  ANALYST  - 
Duties  inch  Involve  in  the  development  of  databases,  create  complex  stored  pro¬ 
cedures,  triggers,  functions,  tables  using  SQL  server,  create  complex  reports  in 
cognos  environment.  Req’ts:  Mstr’s  deg  Computer  Sci,  Engg  (Any),  Math,  Com¬ 
puter  Info  Systems  or  related  field.  Position  #178074.  SR.  PROGRAMMER  AN¬ 
ALYST  -  Duties  inch  Develop  and  write  computer  programs  to  analyze,  design, 
store,  locate,  and  retrieve  specific  documents,  data  and  information.  Analyze, 
design  and  test  system  within  an  application  area,  developing  test  plans  and  test 
scripts,  reviewing  test  procedures,  documenting  and  executing  test  cases,  ana¬ 
lyzing  bugs,  issue  resolution  and  conducting  user  acceptance  testing.  Req’ts: 
Bachelor’s  deg  Computer  Application,  Engg  (Any),  CS  or  related  field  or  related 
field  w/5  yrs  exp  in  the  field.  Position  #178075.  SR.  BUSINESS  ANALYST  - 
Duties  inch  Configure,  Customize,  develop  and  manage  business  for  projects 
and  gaining  appropriate  agreement  and  signoff  from  the  project  team,  reviewing 
Business  Requirement  Documentation  (BRD)  for  assigned  projects  and  provid¬ 
ing  feedback  based  on  the  business  suitability  from  a  risk,  cost,  security,  benefit 
and  design  prospective.  Req’ts:  Mstr’s  deg  Business  Admin,  CS,  ENG  (Any), 
MIS  or  related  field.  Position  #178076.  SR.  BUSINESS  SYSTEMS  ANALYST 
-  Duties  incl:  Configure,  customize  Develop  Gather  and  Manage  business  re¬ 
quirements  for  projects  and  gaining  appropriate  agreement  and  signoff  from 
the  project  team.  Reviewing  Business  Requirement  Documentation  (BRD)  for 
assigned  projects  and  providing  feedback  based  on  the  business  suitability  from 
a  risk  cost  security  benefit  and  design  perspective.  Req’ts:  Mstr’s  deg  Business 
Admin,  CS,  ENG  (Any),  MIS  or  related  field.  Position  #178077.  SR.  NETWORK 
AND  SYSTEMS  ADMINISTRATOR  -  Duties  incl:  Plan,  design,  install,  configure 
and  support  organization  Local  Area  Network(LAN),  Wide  Area  Network.  Back¬ 
up  and  Recover  Strategies,  monitor  servers  and  performance,  resource  man¬ 
agement  and  security,  troubleshooting  of  applications,  provide  desktop  support. 
Creating  accounts,  setting  account  policies  and  permissions.  Req’ts:  Bachelor’s 
deg  Computer  Applications,  Engg  (Any),  CS  or  related  field  or  related  field  w/5 
yrs  exp  in  the  field.  Position  #178078.  Send  resume  with  proof  of  work  eligibility 
to:  Rajeev  Sharma,  Corporate  Controller,  Position#,  Cloudeeva,  Inc,  104  Wind¬ 
sor  enter  Drive,  Suite  #  300,  East  Windsor,  NJ  -  08520. 


IT  careers 


With  100+  branch  offices  located 
across  the  US,  Experis  US,  Inc.,  is 
actively  recruiting  for  the  following 
positions  in  metro  Milwaukee,  Wl. 
Roving  employment  to  varying  job- 
sites  throughout  the  US.  EOE/MF/DV. 
Vendavo  Delivery  Specialist  -  Code 
VDS/dss 

Sr.  Enterprise  Architect  -  Code  SEA/sa 
Please  refer  to  appropriate  code  when 
submitting  resume  to:  Experis  US, 
Inc.,  Attn.  R. Block,  100  Manpower 
Place,  Milwaukee,  Wl  53212  or  rblock. 
resumes@experis.com 


Systems  Analyst;  Orbis  Financial 
Solutions  Group,  LLC;  225  Franklin 
St,  Boston,  MA  02110:  Work  as  part 
of  the  Info  Tech  Team  to  provide  sftwr 
solutions  &  identify  user  reqs  for  cli¬ 
ents  in  biz  community.  Min  Reqs:  MS 
(or  foreign  equiv)  in  Sftwr  Engineering 
Comp  Programming  or  related.  Spe¬ 
cial  Reqs:  Demonstrated  knowledge 
of  implementing  Eagle  PACE  in  the 
asset  mgmt  industry.  Mail  resume  to 
Brian  Donnelly,  Managing  Dir,  Orbis, 
P.O.  Box  1604,  Duxbury,  MA  02331 
w/  ref  to  Job  Code  OF91 . 
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Bits  and  Pieces 


Four  thousand  years  ago,  ancient  Greek  and  Roman  artists  created  mosaics  for  villas  and  churches  by 
laying  tiles  by  hand,  one  by  one— a  long,  laborious  process.  Today,  Boston-based  startup  Artaic  uses  a  robot 
and  software  to  manufacture  mosaics  fast,  with  no  perspiration  involved.  A  customer  sends  Artaic  an 
image  of  his  desired  mosaic,  such  as  a  landscape,  a  celebrity  or  an  animal.  Then  Artaic  designers  use  CAD 
software  to  translate  the  image  into  a  design  suitable  for,  say,  a  wall— or  maybe  the  inside  of  a  pool.  They 
send  the  file  to  Artaic’s  ERP  system,  which  checks  inventory  for  the  necessary  tiles.  An  engineer  then  feeds 
the  tiles  into  a  robot  named  Arty  to  begin  assembling  the  pattern.  Once  the  mosaic  is  complete,  the  engineer 
applies  a  clear  backing  to  seal  the  tiles.  If  there’s  a  mistake,  it’s  possible  to  retrace  steps  and  reproduce  a 
specific  section  of  the  design.  The  average  cost  is  $40  to  $60  per  square  foot.  “People  settle  for  boring  tile 
because  it’s  too  expensive  to  get  more  artistic,”  says  Artaic  founder  and  CEO  Ted  Acworth.  “Technology 
can  enable  more  people  to  get  more  beautiful  tile.”  —Lauren  Brousell 
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Welcome  to  a  flash-transformed  data  center. 

Despite  lower  budgets,  the  need  for  real-time  access  to  data  has  only  increased 
along  with  demands  on  IT.  But  with  SanDisk  SAS  SSDs  and  a  flash-transformed 
data  center,  you  can  accelerate  price/performance  lOOx.  A  win-win  solution 


that  benefits  everyone.  That’s  why  SanDisk  has  been  expanding  the  possibilities 
of  storage  for  over  25  years,  sandisk.com/data 


SarDisk 


Source:  'As  compared  to  10k  RPM  SAS  HDD  with  184  Read  IOPS  performance  and  published  pricing  as  of  January  20,  2015.  ©  SanDisk  Corporation  2015.  All  rights  reserved. 


Foresight  is  21/20. 


